Thread · HN Continuity

GDPR applies regardless of where the data center is located because it applies based on where the user currently resides. Similarly, US laws (including those enabling warrantless surveillance) apply regardless of where the data center is located as long as the owner/customer/controller lives or is based or registered in (or is a subsidiary of an entity that is based or registered in) the US - or if the US decides it has jurisdiction until proven otherwise (cf. Maduro).

You enforce laws the same way you do otherwise: if they are in your jurisdiction and don't comply, you arrest them; if they're in a jursdiction you're friendly with you ask for extradition; if they're in a jurisdiction you're not friendly with and you really need them to cease whatever they ceasen't, you have them accidentally fall out of a high enough window.

You can't shut down a DC in space. But even if someone has moved their DC into space, their terrestial human body is still very easily shut down one way or another. And maybe less gruesomely, so is whatever comms infrastructure they need to maintain in order to actually connect to that DC - if the DC is sufficiently "out of reach" (i.e. not in low Earth orbit) it likely requires optical transmission if it can accomplish any data rate high enough to allow it to be used for something sufficiently annoying and optics are fickle and require careful calibration.

But seriously, us tech nerds routinely underestimate rubber hose cryptoanalyis (cf. XKCD 538). If you can bypass government regulation it's because the government isn't sufficiently interested in making you stop whatever it is you think you need to bypass their regulations to do. If your goal with operating a DC in space is to evade the "regulatory arbitrage", you're literally advertising your intent to operate what will most likely be a criminal enterprise so unless you have sufficient financial resources to exert political leverage in your favor (cf. Musk), you're just asking for trouble.